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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address- 
All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1.313 and MPEP 1308. 

1 . (3 This communication is responsive to December 29. 2005 . 

2. ^ The allowed claim(s) is/are 1-7.9-26 and 28-36 . 

3. □ Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 

a) □ All b) □ Some* c) □ None of the: 

1. □ Certified copies of the priority documents have been received. 

2. □ Certified copies of the priority documents have been received in Application No. . 

3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 

Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements 
noted below. Failure to timely comply will result in ABANDONMENT of this application. 
THIS THREE-MONTH PERIOD IS NOT EXTENDABLE. 

4. □ A SUBSTITUTE OATH OR DECLARATION must be submitted. Note the attached EXAMINER'S AMENDMENT or NOTICE OF 

INFORMAL PATENT APPLICATION (PTO-152) which gives reason(s) why the oath or declaration is deficient. 

5. □ CORRECTED DRAWINGS ( as "replacement sheets") must be submitted. 

(a) □ including changes required by the Notice of Draftsperson's Patent Drawing Review ( PTO-948) attached 

1 ) □ hereto or 2) □ to Paper No./Mail Date . 

(b) □ including changes required by the attached Examiner's Amendment / Comment or in the Office action of 

Paper NoVMail Date . 

Identifying indicia such as the application number (see 37 CFR 1.84(c)) should be written on the drawings in the front (not the back) of 
each sheet. Replacement sheet(s) should be labeled as such in the header according to 37 CFR 1.121(d). 

6 □ DEPOSIT OF and/or INFORMATION about the deposit of BIOLOGICAL MATERIAL must be submitted. Note the 
attached Examiner's comment regarding REQUIREMENT FOR THE DEPOSIT OF BIOLOGICAL MATERIAL. 
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1 . □ Notice of References Cited (PTO-892) 5. □ Notice of Informal Patent Application (PTO-152) 

2. □ Notice of Draftperson's Patent Drawing Review (PTO-948) 6. □ Interview Summary (PTO-413), 

Paper No./Mail Date . 

3. □ Information Disclosure Statements (PTO-1449 or PTO/SB/08), 7. S Examiner's Amendment/Comment 

Paper NoVMail Date 

4. □ Examiner's Comment Regarding Requirement for Deposit 8. El Examiner's Statement of Reasons for Allowance 

of Biological Material 

9. □ Other . 
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EXAMINER'S AMENDMENT 

1 . An examiner's amendment to the record appears below. Should the 
changes and/or additions be unacceptable to applicant, an amendment may be 
filed as provided by 37 CFR 1.312. To ensure consideration of such an 
amendment, it MUST be submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone 
interview with Steven Funk on 2/22/06. 

2. The application has been amended as follows: 
In claim 1 

"enrolling the user with the targeted service via the enrollment module 
when the network connection is directed to the enrollment module." 
has been changed to 

-enrolling the user with the targeted service via the enrollment module 
when the network connection is directed to the enrollment module; and 

automatically directing the network connection to the targeted service in 
response to the enrollment.-- 

In claim 16 

"a switch module coupled to receive a security certificate utilized by the 
wireless terminal in establishing a connection therewith, wherein the switch 
module directs the connection to either the service module or the enrollment 
manager depending on the security certificate utilized in establishing the 
connection, wherein the enrollment manager is configured to issue 
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authentication certificates upon successful registration, including a service 
provider authentication certificate required for use with the secure service." 
has been changed to 

-a switch module coupled to receive a security certificate utilized by the 
wireless terminal in establishing a connection therewith, wherein the switch 
module directs the connection to either the service module or the enrollment 
manager depending on the security certificate utilized in establishing the 
connection, wherein the enrollment manager is configured to issue 
authentication certificates upon successful registration, including a service 
provider authentication certificate required for use with the secure service, and 
wherein at least one of the switch module or the enrollment module 
automatically directs the network connection to the service module in response 
to the registration. — 

In claim 28 

"a network switch coupled to receive an authentication certificate utilized 
by a wireless terminal in establishing a connection with the network of 
computing systems, wherein the network switch switches the connection to the 
server computing system or the enrollment server depending on the 
authentication certificate utilized by the wireless terminal in establishing the 
connection, wherein the wireless terminal is enrolled with the secure service via 
the enrollment server when the network connection is directed to the enrollment 
server." 

has been changed to 
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-a network switch coupled to receive an authentication certificate utilized 
by a wireless terminal in establishing a connection with the network of 
computing systems, wherein the network switch switches the connection to the 
server computing system or the enrollment server depending on the 
authentication certificate utilized by the wireless terminal in establishing the 
connection, wherein the wireless terminal is enrolled with the secure service via 
the enrollment server when the network connection is directed to the enrollment 
server, and wherein at least one of the network switch or the enrollment server 
automatically directs the network connection to the service module in response 
to the enrollment.-- 

In claim 32 

"means for enrolling the user with the targeted service based on the 
network connection being directed to the enrollment module." 
has been changed to 

-means for enrolling the user with the targeted service based on the 
network connection being directed to the enrollment module; and 

means for automatically directing the network connection to the targeted 
service in response to the enrollment- 

In claim 33 

"facilitating enrollment of the user with the targeted service via the 
enrollment module when the network connection is directed to the enrollment 
module." 

has been changed to 
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-facilitating enrollment of the user with the targeted service via the 
enrollment module when the network connection is directed to the enrollment 
module; and 

facilitating automatic redirection of the network connection to the targeted 
service in response to the enrollment- 
In claim 34 

"a compare module coupled to receive an authentication certificate from 
the wireless terminal corresponding to the highest order authentication certificate 
available at the wireless terminal based on the preferred order indication, 
wherein the compare module is configured to compare the received 
authentication certificate with the plurality of authentication certificates and to 
direct the connection to either the secure service or an enrollment manager to 
register for the secure service using a user identity and a private key based on 
the result of the comparison." 

has been changed to 

-a compare module coupled to receive an authentication certificate from 
the wireless terminal corresponding to the highest order authentication certificate 
available at the wireless terminal based on the preferred order indication, 
wherein the compare module is configured to compare the received 
authentication certificate with the plurality of authentication certificates and to 
direct the connection to either the secure service or an enrollment manager to 
register for the secure service using a user identity and a private key based on 
the result of the comparison, wherein at least one of the compare module or the 
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enrollment manager automatically directs the connection to the secure service in 
response to the enrollment.-- 



Allowable Subject Matter 

3. This action is in response to the communication dated December 29, 2005 
with the amendments to claims 1,9, 16, 28 and 32-33 and the cancellation of 
claims 8 and 27. 

4. Claims 1-7, 9-26 and 28-36 are allowed. 

5. The following is an examiner's statement of reasons for allowance: 

The present invention is directed to a system and method for automatically 
switching network connections to an appropriate network entity based on access 
rights possessed by a user of a wireless terminal. Each independent claim 
(claims 1 , 1 6, 28 and 32-33) identifies the uniquely distinct features of enrolling 
the wireless terminal user with the targeted service via the enrollment module 
when the network connection is directed to the enrollment module and 
automatically directing the network connection to the targeted service in 
response to the enrollment. These unique features provide a more efficient and 
convenient manner of accessing secure services regardless of whether or not the 
user already has been authenticated and/or authorized to use such services. The 
closest prior arts of Geiger et al. (6,463,534), Cutaia et al. (2002/0004390), 
Bisbee et al. (6,367,013) and Rajan et al. (6,633,910) fail to anticipate or render 
the above limitations obvious. 
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Any comments considered necessary by applicant must be submitted no 
later than the payment of the issue fee and, to avoid processing delays, should 
preferably accompany the issue fee. Such submissions should be clearly labeled 
"Comments on Statement of Reasons for Allowance." 

6. Any inquiry concerning this communication or earlier communications from 
the examiner should be directed to Minh Dieu Nguyen whose telephone number 
is 571-272-3873. The examiner can normally be reached on M-F 6:00-2:30. 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Emmanuel Moise can be reached on 571-272-3865. The 
fax phone number for the organization where this application or proceeding is 
assigned is (571 ) 273-8300. 

Information regarding the status of an application may be obtained from 
the Patent Application Information Retrieval (PAIR) system. Status information 
for published applications may be obtained from either Private PAIR or Public 
PAIR. Status information for unpublished applications is available through Private 
PAIR only. For more information about the PAIR system, see http://pair- 
direct.uspto.gov . Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll- 
free). 
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